Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: McJLUXcU9D6D8+sIAsXL4J65mvM95s2jn7gmASME95k=
Subject key identifier: A4:B1:FD:80:18:63:08:76:87:E0:27:07:30:62:3E:BF:47:93:1A:6E
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019EB7A15A90BF3B6C13EF4510D1E8BA5C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0E65
Signing time: Thu 11 Jun 2026 17:01:05 +0000
Manifest this update: Thu 11 Jun 2026 17:01:05 +0000
Manifest next update: Fri 12 Jun 2026 17:01:05 +0000
Files and hashes: 1: 4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa (hash: AzbxLrQ0rBUs69Ie4HmTc38VBCdV7Bu9rChwxjbGaTI=)
2: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: 0NMJY/abBH8BSj68MUo5AaGEj2LTKaoz9ne4UZvd1Qk=)
3: fdwbgBklrjdovCeYbqvQYFGn8iQ.roa (hash: 8Me+/KWLgHoPwHgTQu4VQrh3NLbvTzJ2Ie0jnlhQSkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:5a:90:bf:3b:6c:13:ef:45:10:d1:e8:ba:5c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Jun 11 17:01:05 2026 GMT
Not After : Jun 12 17:01:05 2026 GMT
Subject: CN=a4b1fd801863087687e0270730623ebf47931a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:9f:12:f2:f3:6a:cc:c5:41:0a:bd:cc:c5:
d6:78:59:18:38:17:8c:03:1e:f4:c8:58:89:81:c8:
72:99:e0:92:fb:5d:b8:5c:fa:3d:11:e2:c1:69:07:
c4:1d:43:fe:51:c8:bb:a9:2b:fa:96:b8:7b:8b:63:
6b:a8:39:d9:82:30:66:17:70:5f:98:6e:ab:68:f1:
2b:b3:1c:b4:cd:97:7a:d1:20:a4:3e:16:61:f0:4c:
8d:c7:46:3f:df:de:0b:97:08:da:9f:5a:c3:15:96:
69:77:a4:93:dd:e9:2c:9e:e1:83:61:bf:62:d9:ac:
5f:fb:73:f2:de:1e:aa:4d:c9:a2:9a:26:d4:a3:77:
17:dc:d6:3e:5b:2b:07:14:74:0d:7c:7c:89:95:21:
97:14:e8:b5:29:6a:9e:f2:c4:eb:3a:cd:91:12:94:
61:65:e7:a8:7f:cc:1e:96:65:d0:ff:70:b4:c5:a3:
1c:50:25:8d:65:9d:20:86:37:54:28:46:70:8a:9f:
a9:44:bb:1a:04:ed:07:f1:a5:3c:27:25:a5:ab:b2:
40:b0:f9:05:ff:1f:df:cd:d9:d4:4e:7d:5c:52:56:
09:da:f5:60:a8:3e:69:c9:20:3a:53:32:2e:66:48:
56:11:bf:df:2f:7b:52:6b:ed:8c:53:85:3f:41:fc:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B1:FD:80:18:63:08:76:87:E0:27:07:30:62:3E:BF:47:93:1A:6E
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:af:9a:9e:38:6c:5c:af:b5:ef:f4:53:f0:50:2f:6a:a1:c9:
c9:0b:7f:ae:3d:24:00:d3:16:0b:05:8c:bd:7c:f7:32:b2:0c:
e7:43:b4:a2:ae:4e:49:7b:d6:d5:65:d7:bd:05:6c:65:0f:ae:
b7:0a:86:29:d7:20:1c:ba:e8:b1:f1:af:0c:26:73:6c:39:68:
5d:13:c5:92:73:7f:e1:d0:77:b6:97:3a:31:d6:6f:6b:cb:dd:
d2:05:92:b1:dc:ac:1f:a0:95:d3:b3:b0:b0:c9:ea:9b:14:af:
f6:0d:1b:13:21:48:99:53:4e:ff:12:42:ef:14:6a:01:16:6b:
a9:49:b7:cf:2b:19:02:87:d8:69:29:87:b9:b2:c7:32:d4:a1:
cd:2b:ed:4c:9c:5d:3a:eb:83:b8:b3:02:af:b9:74:df:b0:28:
20:8f:d3:d7:b9:95:ec:b2:8a:70:d8:36:71:5d:ec:e9:28:5e:
51:f1:0f:2a:f3:19:9b:8d:55:0d:46:5a:1f:e0:7c:ca:54:e9:
29:79:7e:fb:89:89:9d:10:a4:f9:eb:c3:34:40:67:75:15:97:
72:8c:cb:a8:d4:25:16:83:09:a5:96:e9:c7:d8:cf:bd:d9:d7:
9a:b9:35:0e:c4:dc:70:ef:3f:72:03:e7:01:da:4b:f8:ef:db:
04:7c:0d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oVqQvztsE+9FENHoulxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2
NjlmMTIwHhcNMjYwNjExMTcwMTA1WhcNMjYwNjEyMTcwMTA1WjAzMTEwLwYDVQQD
EyhhNGIxZmQ4MDE4NjMwODc2ODdlMDI3MDczMDYyM2ViZjQ3OTMxYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/6fEvLzaszFQQq9zMXWeFkYOBeM
Ax70yFiJgchymeCS+124XPo9EeLBaQfEHUP+Uci7qSv6lrh7i2NrqDnZgjBmF3Bf
mG6raPErsxy0zZd60SCkPhZh8EyNx0Y/394Llwjan1rDFZZpd6ST3eksnuGDYb9i
2axf+3Py3h6qTcmimibUo3cX3NY+WysHFHQNfHyJlSGXFOi1KWqe8sTrOs2REpRh
Zeeof8welmXQ/3C0xaMcUCWNZZ0ghjdUKEZwip+pRLsaBO0H8aU8JyWlq7JAsPkF
/x/fzdnUTn1cUlYJ2vVgqD5pySA6UzIuZkhWEb/fL3tSa+2MU4U/Qfx3+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSx/YAYYwh2h+AnBzBiPr9HkxpuMB8GA1UdIwQY
MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt
YjhmM2YwOWVhYWRlLzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl
LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWq+anjhs
XK+17/RT8FAvaqHJyQt/rj0kANMWCwWMvXz3MrIM50O0oq5OSXvW1WXXvQVsZQ+u
twqGKdcgHLrosfGvDCZzbDloXRPFknN/4dB3tpc6MdZva8vd0gWSsdysH6CV07Ow
sMnqmxSv9g0bEyFImVNO/xJC7xRqARZrqUm3zysZAofYaSmHubLHMtShzSvtTJxd
OuuDuLMCr7l037AoII/T17mV7LKKcNg2cV3s6SheUfEPKvMZm41VDUZaH+B8ylTp
KXl++4mJnRCk+evDNEBndRWXcozLqNQlFoMJpZbpx9jPvdnXmrk1DsTccO8/cgPn
AdpL+O/bBHwNvQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:39:21 2026 by rpki-client